aws.wafv2.RuleGroup
Explore with Pulumi AI
Create RuleGroup Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new RuleGroup(name: string, args: RuleGroupArgs, opts?: CustomResourceOptions);@overload
def RuleGroup(resource_name: str,
              args: RuleGroupArgs,
              opts: Optional[ResourceOptions] = None)
@overload
def RuleGroup(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              capacity: Optional[int] = None,
              custom_response_bodies: Optional[Sequence[RuleGroupCustomResponseBodyArgs]] = None,
              description: Optional[str] = None,
              name: Optional[str] = None,
              name_prefix: Optional[str] = None,
              rules: Optional[Sequence[RuleGroupRuleArgs]] = None,
              scope: Optional[str] = None,
              tags: Optional[Mapping[str, str]] = None,
              visibility_config: Optional[RuleGroupVisibilityConfigArgs] = None)func NewRuleGroup(ctx *Context, name string, args RuleGroupArgs, opts ...ResourceOption) (*RuleGroup, error)public RuleGroup(string name, RuleGroupArgs args, CustomResourceOptions? opts = null)
public RuleGroup(String name, RuleGroupArgs args)
public RuleGroup(String name, RuleGroupArgs args, CustomResourceOptions options)
type: aws:wafv2:RuleGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args RuleGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args RuleGroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args RuleGroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args RuleGroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args RuleGroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
RuleGroup Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The RuleGroup resource accepts the following input properties:
- Capacity int
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- VisibilityConfig RuleGroup Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- CustomResponse List<RuleBodies Group Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- Description string
- A friendly description of the rule group.
- Name string
- A friendly name of the rule group.
- NamePrefix string
- Rules
List<RuleGroup Rule> 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- Dictionary<string, string>
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Capacity int
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- VisibilityConfig RuleGroup Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- CustomResponse []RuleBodies Group Custom Response Body Args 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- Description string
- A friendly description of the rule group.
- Name string
- A friendly name of the rule group.
- NamePrefix string
- Rules
[]RuleGroup Rule Args 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- map[string]string
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- capacity Integer
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibilityConfig RuleGroup Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- customResponse List<RuleBodies Group Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description String
- A friendly description of the rule group.
- name String
- A friendly name of the rule group.
- namePrefix String
- rules
List<RuleGroup Rule> 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- Map<String,String>
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- capacity number
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibilityConfig RuleGroup Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- customResponse RuleBodies Group Custom Response Body[] 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description string
- A friendly description of the rule group.
- name string
- A friendly name of the rule group.
- namePrefix string
- rules
RuleGroup Rule[] 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- {[key: string]: string}
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- capacity int
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- scope str
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibility_config RuleGroup Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- custom_response_ Sequence[Rulebodies Group Custom Response Body Args] 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description str
- A friendly description of the rule group.
- name str
- A friendly name of the rule group.
- name_prefix str
- rules
Sequence[RuleGroup Rule Args] 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- Mapping[str, str]
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- capacity Number
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- visibilityConfig Property Map
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- customResponse List<Property Map>Bodies 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description String
- A friendly description of the rule group.
- name String
- A friendly name of the rule group.
- namePrefix String
- rules List<Property Map>
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- Map<String>
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
Outputs
All input properties are implicitly available as output properties. Additionally, the RuleGroup resource produces the following output properties:
- arn str
- The ARN of the WAF rule group.
- id str
- The provider-assigned unique ID for this managed resource.
- lock_token str
- Mapping[str, str]
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
Look up Existing RuleGroup Resource
Get an existing RuleGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: RuleGroupState, opts?: CustomResourceOptions): RuleGroup@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        capacity: Optional[int] = None,
        custom_response_bodies: Optional[Sequence[RuleGroupCustomResponseBodyArgs]] = None,
        description: Optional[str] = None,
        lock_token: Optional[str] = None,
        name: Optional[str] = None,
        name_prefix: Optional[str] = None,
        rules: Optional[Sequence[RuleGroupRuleArgs]] = None,
        scope: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tags_all: Optional[Mapping[str, str]] = None,
        visibility_config: Optional[RuleGroupVisibilityConfigArgs] = None) -> RuleGroupfunc GetRuleGroup(ctx *Context, name string, id IDInput, state *RuleGroupState, opts ...ResourceOption) (*RuleGroup, error)public static RuleGroup Get(string name, Input<string> id, RuleGroupState? state, CustomResourceOptions? opts = null)public static RuleGroup get(String name, Output<String> id, RuleGroupState state, CustomResourceOptions options)resources:  _:    type: aws:wafv2:RuleGroup    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Arn string
- The ARN of the WAF rule group.
- Capacity int
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- CustomResponse List<RuleBodies Group Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- Description string
- A friendly description of the rule group.
- LockToken string
- Name string
- A friendly name of the rule group.
- NamePrefix string
- Rules
List<RuleGroup Rule> 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Dictionary<string, string>
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Dictionary<string, string>
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- VisibilityConfig RuleGroup Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- Arn string
- The ARN of the WAF rule group.
- Capacity int
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- CustomResponse []RuleBodies Group Custom Response Body Args 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- Description string
- A friendly description of the rule group.
- LockToken string
- Name string
- A friendly name of the rule group.
- NamePrefix string
- Rules
[]RuleGroup Rule Args 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- Scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- map[string]string
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- map[string]string
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- VisibilityConfig RuleGroup Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- arn String
- The ARN of the WAF rule group.
- capacity Integer
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- customResponse List<RuleBodies Group Custom Response Body> 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description String
- A friendly description of the rule group.
- lockToken String
- name String
- A friendly name of the rule group.
- namePrefix String
- rules
List<RuleGroup Rule> 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Map<String,String>
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Map<String,String>
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- visibilityConfig RuleGroup Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- arn string
- The ARN of the WAF rule group.
- capacity number
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- customResponse RuleBodies Group Custom Response Body[] 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description string
- A friendly description of the rule group.
- lockToken string
- name string
- A friendly name of the rule group.
- namePrefix string
- rules
RuleGroup Rule[] 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- scope string
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- {[key: string]: string}
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- {[key: string]: string}
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- visibilityConfig RuleGroup Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- arn str
- The ARN of the WAF rule group.
- capacity int
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- custom_response_ Sequence[Rulebodies Group Custom Response Body Args] 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description str
- A friendly description of the rule group.
- lock_token str
- name str
- A friendly name of the rule group.
- name_prefix str
- rules
Sequence[RuleGroup Rule Args] 
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- scope str
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Mapping[str, str]
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Mapping[str, str]
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- visibility_config RuleGroup Visibility Config Args 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- arn String
- The ARN of the WAF rule group.
- capacity Number
- The web ACL capacity units (WCUs) required for this rule group. See here for general information and here for capacity specific information.
- customResponse List<Property Map>Bodies 
- Defines custom response bodies that can be referenced by custom_responseactions. See Custom Response Body below for details.
- description String
- A friendly description of the rule group.
- lockToken String
- name String
- A friendly name of the rule group.
- namePrefix String
- rules List<Property Map>
- The rule blocks used to identify the web requests that you want to allow,block, orcount. See Rules below for details.
- scope String
- Specifies whether this is for an AWS CloudFront distribution or for a regional application. Valid values are CLOUDFRONTorREGIONAL. To work with CloudFront, you must also specify the regionus-east-1(N. Virginia) on the AWS provider.
- Map<String>
- An array of key:value pairs to associate with the resource. If configured with a provider default_tagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.
- Map<String>
- A map of tags assigned to the resource, including those inherited from the provider default_tagsconfiguration block.
- visibilityConfig Property Map
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
Supporting Types
Note: There are over 200 nested types for this resource. Only the first 200 types are included in this documentation.
RuleGroupCustomResponseBody, RuleGroupCustomResponseBodyArgs          
- Content string
- The payload of the custom response.
- ContentType string
- The type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- Key string
- A unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in the Custom Response block.
- Content string
- The payload of the custom response.
- ContentType string
- The type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- Key string
- A unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in the Custom Response block.
- content String
- The payload of the custom response.
- contentType String
- The type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key String
- A unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in the Custom Response block.
- content string
- The payload of the custom response.
- contentType string
- The type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key string
- A unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in the Custom Response block.
- content str
- The payload of the custom response.
- content_type str
- The type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key str
- A unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in the Custom Response block.
- content String
- The payload of the custom response.
- contentType String
- The type of content in the payload that you are defining in the contentargument. Valid values areTEXT_PLAIN,TEXT_HTML, orAPPLICATION_JSON.
- key String
- A unique key identifying the custom response body. This is referenced by the custom_response_body_keyargument in the Custom Response block.
RuleGroupRule, RuleGroupRuleArgs      
- Action
RuleGroup Rule Action 
- The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcllevel can override the rule action setting. See Action below for details.
- Name string
- A friendly name of the rule.
- Priority int
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- Statement
RuleGroup Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. See Statement below for details.
- VisibilityConfig RuleGroup Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- CaptchaConfig RuleGroup Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
- RuleLabels List<RuleGroup Rule Rule Label> 
- Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
- Action
RuleGroup Rule Action 
- The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcllevel can override the rule action setting. See Action below for details.
- Name string
- A friendly name of the rule.
- Priority int
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- Statement
RuleGroup Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. See Statement below for details.
- VisibilityConfig RuleGroup Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- CaptchaConfig RuleGroup Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
- RuleLabels []RuleGroup Rule Rule Label 
- Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
- action
RuleGroup Rule Action 
- The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcllevel can override the rule action setting. See Action below for details.
- name String
- A friendly name of the rule.
- priority Integer
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement
RuleGroup Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. See Statement below for details.
- visibilityConfig RuleGroup Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- captchaConfig RuleGroup Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
- ruleLabels List<RuleGroup Rule Rule Label> 
- Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
- action
RuleGroup Rule Action 
- The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcllevel can override the rule action setting. See Action below for details.
- name string
- A friendly name of the rule.
- priority number
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement
RuleGroup Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. See Statement below for details.
- visibilityConfig RuleGroup Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- captchaConfig RuleGroup Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
- ruleLabels RuleGroup Rule Rule Label[] 
- Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
- action
RuleGroup Rule Action 
- The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcllevel can override the rule action setting. See Action below for details.
- name str
- A friendly name of the rule.
- priority int
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement
RuleGroup Rule Statement 
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. See Statement below for details.
- visibility_config RuleGroup Rule Visibility Config 
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- captcha_config RuleGroup Rule Captcha Config 
- Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
- rule_labels Sequence[RuleGroup Rule Rule Label] 
- Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
- action Property Map
- The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the aws.wafv2.WebAcllevel can override the rule action setting. See Action below for details.
- name String
- A friendly name of the rule.
- priority Number
- If you define more than one Rule in a WebACL, AWS WAF evaluates each request against the rulesin order based on the value ofpriority. AWS WAF processes rules with lower priority first.
- statement Property Map
- The AWS WAF processing statement for the rule, for example byte_match_statementorgeo_match_statement. See Statement below for details.
- visibilityConfig Property Map
- Defines and enables Amazon CloudWatch metrics and web request sample collection. See Visibility Configuration below for details.
- captchaConfig Property Map
- Specifies how AWS WAF should handle CAPTCHA evaluations. See Captcha Configuration below for details.
- ruleLabels List<Property Map>
- Labels to apply to web requests that match the rule match statement. See Rule Label below for details.
RuleGroupRuleAction, RuleGroupRuleActionArgs        
- Allow
RuleGroup Rule Action Allow 
- Instructs AWS WAF to allow the web request. See Allow below for details.
- Block
RuleGroup Rule Action Block 
- Instructs AWS WAF to block the web request. See Block below for details.
- Captcha
RuleGroup Rule Action Captcha 
- Instructs AWS WAF to run a CAPTCHAcheck against the web request. See Captcha below for details.
- Challenge
RuleGroup Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
- Count
RuleGroup Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See Count below for details.
- Allow
RuleGroup Rule Action Allow 
- Instructs AWS WAF to allow the web request. See Allow below for details.
- Block
RuleGroup Rule Action Block 
- Instructs AWS WAF to block the web request. See Block below for details.
- Captcha
RuleGroup Rule Action Captcha 
- Instructs AWS WAF to run a CAPTCHAcheck against the web request. See Captcha below for details.
- Challenge
RuleGroup Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
- Count
RuleGroup Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See Count below for details.
- allow
RuleGroup Rule Action Allow 
- Instructs AWS WAF to allow the web request. See Allow below for details.
- block
RuleGroup Rule Action Block 
- Instructs AWS WAF to block the web request. See Block below for details.
- captcha
RuleGroup Rule Action Captcha 
- Instructs AWS WAF to run a CAPTCHAcheck against the web request. See Captcha below for details.
- challenge
RuleGroup Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
- count
RuleGroup Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See Count below for details.
- allow
RuleGroup Rule Action Allow 
- Instructs AWS WAF to allow the web request. See Allow below for details.
- block
RuleGroup Rule Action Block 
- Instructs AWS WAF to block the web request. See Block below for details.
- captcha
RuleGroup Rule Action Captcha 
- Instructs AWS WAF to run a CAPTCHAcheck against the web request. See Captcha below for details.
- challenge
RuleGroup Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
- count
RuleGroup Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See Count below for details.
- allow
RuleGroup Rule Action Allow 
- Instructs AWS WAF to allow the web request. See Allow below for details.
- block
RuleGroup Rule Action Block 
- Instructs AWS WAF to block the web request. See Block below for details.
- captcha
RuleGroup Rule Action Captcha 
- Instructs AWS WAF to run a CAPTCHAcheck against the web request. See Captcha below for details.
- challenge
RuleGroup Rule Action Challenge 
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
- count
RuleGroup Rule Action Count 
- Instructs AWS WAF to count the web request and allow it. See Count below for details.
- allow Property Map
- Instructs AWS WAF to allow the web request. See Allow below for details.
- block Property Map
- Instructs AWS WAF to block the web request. See Block below for details.
- captcha Property Map
- Instructs AWS WAF to run a CAPTCHAcheck against the web request. See Captcha below for details.
- challenge Property Map
- Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
- count Property Map
- Instructs AWS WAF to count the web request and allow it. See Count below for details.
RuleGroupRuleActionAllow, RuleGroupRuleActionAllowArgs          
- CustomRequest RuleHandling Group Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- CustomRequest RuleHandling Group Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- custom_request_ Rulehandling Group Rule Action Allow Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
RuleGroupRuleActionAllowCustomRequestHandling, RuleGroupRuleActionAllowCustomRequestHandlingArgs                
- InsertHeaders List<RuleGroup Rule Action Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- InsertHeaders []RuleGroup Rule Action Allow Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<RuleGroup Rule Action Allow Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders RuleGroup Rule Action Allow Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insert_headers Sequence[RuleGroup Rule Action Allow Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
RuleGroupRuleActionAllowCustomRequestHandlingInsertHeader, RuleGroupRuleActionAllowCustomRequestHandlingInsertHeaderArgs                    
RuleGroupRuleActionBlock, RuleGroupRuleActionBlockArgs          
- CustomResponse RuleGroup Rule Action Block Custom Response 
- Defines a custom response for the web request. See Custom Response below for details.
- CustomResponse RuleGroup Rule Action Block Custom Response 
- Defines a custom response for the web request. See Custom Response below for details.
- customResponse RuleGroup Rule Action Block Custom Response 
- Defines a custom response for the web request. See Custom Response below for details.
- customResponse RuleGroup Rule Action Block Custom Response 
- Defines a custom response for the web request. See Custom Response below for details.
- custom_response RuleGroup Rule Action Block Custom Response 
- Defines a custom response for the web request. See Custom Response below for details.
- customResponse Property Map
- Defines a custom response for the web request. See Custom Response below for details.
RuleGroupRuleActionBlockCustomResponse, RuleGroupRuleActionBlockCustomResponseArgs              
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders List<RuleGroup Rule Action Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
- ResponseCode int
- The HTTP status code to return to the client.
- CustomResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- ResponseHeaders []RuleGroup Rule Action Block Custom Response Response Header 
- The response_headerblocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
- responseCode Integer
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<RuleGroup Rule Action Block Custom Response Response Header> 
- The response_headerblocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
- responseCode number
- The HTTP status code to return to the client.
- customResponse stringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders RuleGroup Rule Action Block Custom Response Response Header[] 
- The response_headerblocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
- response_code int
- The HTTP status code to return to the client.
- custom_response_ strbody_ key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- response_headers Sequence[RuleGroup Rule Action Block Custom Response Response Header] 
- The response_headerblocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
- responseCode Number
- The HTTP status code to return to the client.
- customResponse StringBody Key 
- References the response body that you want AWS WAF to return to the web request client. This must reference a keydefined in acustom_response_bodyblock of this resource.
- responseHeaders List<Property Map>
- The response_headerblocks used to define the HTTP response headers added to the response. See Custom HTTP Header below for details.
RuleGroupRuleActionBlockCustomResponseResponseHeader, RuleGroupRuleActionBlockCustomResponseResponseHeaderArgs                  
RuleGroupRuleActionCaptcha, RuleGroupRuleActionCaptchaArgs          
- CustomRequest RuleHandling Group Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- CustomRequest RuleHandling Group Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- custom_request_ Rulehandling Group Rule Action Captcha Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
RuleGroupRuleActionCaptchaCustomRequestHandling, RuleGroupRuleActionCaptchaCustomRequestHandlingArgs                
- InsertHeaders List<RuleGroup Rule Action Captcha Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- InsertHeaders []RuleGroup Rule Action Captcha Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<RuleGroup Rule Action Captcha Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders RuleGroup Rule Action Captcha Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insert_headers Sequence[RuleGroup Rule Action Captcha Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader, RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeaderArgs                    
RuleGroupRuleActionChallenge, RuleGroupRuleActionChallengeArgs          
- CustomRequest RuleHandling Group Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- CustomRequest RuleHandling Group Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- custom_request_ Rulehandling Group Rule Action Challenge Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
RuleGroupRuleActionChallengeCustomRequestHandling, RuleGroupRuleActionChallengeCustomRequestHandlingArgs                
- InsertHeaders List<RuleGroup Rule Action Challenge Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- InsertHeaders []RuleGroup Rule Action Challenge Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<RuleGroup Rule Action Challenge Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders RuleGroup Rule Action Challenge Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insert_headers Sequence[RuleGroup Rule Action Challenge Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader, RuleGroupRuleActionChallengeCustomRequestHandlingInsertHeaderArgs                    
RuleGroupRuleActionCount, RuleGroupRuleActionCountArgs          
- CustomRequest RuleHandling Group Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- CustomRequest RuleHandling Group Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest RuleHandling Group Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- custom_request_ Rulehandling Group Rule Action Count Custom Request Handling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
- customRequest Property MapHandling 
- Defines custom handling for the web request. See Custom Request Handling below for details.
RuleGroupRuleActionCountCustomRequestHandling, RuleGroupRuleActionCountCustomRequestHandlingArgs                
- InsertHeaders List<RuleGroup Rule Action Count Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- InsertHeaders []RuleGroup Rule Action Count Custom Request Handling Insert Header 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<RuleGroup Rule Action Count Custom Request Handling Insert Header> 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders RuleGroup Rule Action Count Custom Request Handling Insert Header[] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insert_headers Sequence[RuleGroup Rule Action Count Custom Request Handling Insert Header] 
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
- insertHeaders List<Property Map>
- The insert_headerblocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
RuleGroupRuleActionCountCustomRequestHandlingInsertHeader, RuleGroupRuleActionCountCustomRequestHandlingInsertHeaderArgs                    
RuleGroupRuleCaptchaConfig, RuleGroupRuleCaptchaConfigArgs          
- ImmunityTime RuleProperty Group Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See Immunity Time Property below for details.
- ImmunityTime RuleProperty Group Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See Immunity Time Property below for details.
- immunityTime RuleProperty Group Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See Immunity Time Property below for details.
- immunityTime RuleProperty Group Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See Immunity Time Property below for details.
- immunity_time_ Ruleproperty Group Rule Captcha Config Immunity Time Property 
- Defines custom immunity time. See Immunity Time Property below for details.
- immunityTime Property MapProperty 
- Defines custom immunity time. See Immunity Time Property below for details.
RuleGroupRuleCaptchaConfigImmunityTimeProperty, RuleGroupRuleCaptchaConfigImmunityTimePropertyArgs                
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- ImmunityTime int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Integer
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunity_time int
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
- immunityTime Number
- The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by AWS WAF. The default setting is 300.
RuleGroupRuleRuleLabel, RuleGroupRuleRuleLabelArgs          
- Name string
- The label string.
- Name string
- The label string.
- name String
- The label string.
- name string
- The label string.
- name str
- The label string.
- name String
- The label string.
RuleGroupRuleStatement, RuleGroupRuleStatementArgs        
- AndStatement RuleGroup Rule Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- ByteMatch RuleStatement Group Rule Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- GeoMatch RuleStatement Group Rule Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- IpSet RuleReference Statement Group Rule Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- LabelMatch RuleStatement Group Rule Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- NotStatement RuleGroup Rule Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- OrStatement RuleGroup Rule Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- RateBased RuleStatement Group Rule Statement Rate Based Statement 
- A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. See Rate Based Statement below for details.
- RegexMatch RuleStatement Group Rule Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- RegexPattern RuleSet Reference Statement Group Rule Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- SizeConstraint RuleStatement Group Rule Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- SqliMatch RuleStatement Group Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- XssMatch RuleStatement Group Rule Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- AndStatement RuleGroup Rule Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- ByteMatch RuleStatement Group Rule Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- GeoMatch RuleStatement Group Rule Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- IpSet RuleReference Statement Group Rule Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- LabelMatch RuleStatement Group Rule Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- NotStatement RuleGroup Rule Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- OrStatement RuleGroup Rule Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- RateBased RuleStatement Group Rule Statement Rate Based Statement 
- A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. See Rate Based Statement below for details.
- RegexMatch RuleStatement Group Rule Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- RegexPattern RuleSet Reference Statement Group Rule Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- SizeConstraint RuleStatement Group Rule Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- SqliMatch RuleStatement Group Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- XssMatch RuleStatement Group Rule Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- andStatement RuleGroup Rule Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byteMatch RuleStatement Group Rule Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geoMatch RuleStatement Group Rule Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ipSet RuleReference Statement Group Rule Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- labelMatch RuleStatement Group Rule Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- notStatement RuleGroup Rule Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- orStatement RuleGroup Rule Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- rateBased RuleStatement Group Rule Statement Rate Based Statement 
- A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. See Rate Based Statement below for details.
- regexMatch RuleStatement Group Rule Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regexPattern RuleSet Reference Statement Group Rule Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- sizeConstraint RuleStatement Group Rule Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqliMatch RuleStatement Group Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xssMatch RuleStatement Group Rule Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- andStatement RuleGroup Rule Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byteMatch RuleStatement Group Rule Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geoMatch RuleStatement Group Rule Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ipSet RuleReference Statement Group Rule Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- labelMatch RuleStatement Group Rule Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- notStatement RuleGroup Rule Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- orStatement RuleGroup Rule Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- rateBased RuleStatement Group Rule Statement Rate Based Statement 
- A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. See Rate Based Statement below for details.
- regexMatch RuleStatement Group Rule Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regexPattern RuleSet Reference Statement Group Rule Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- sizeConstraint RuleStatement Group Rule Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqliMatch RuleStatement Group Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xssMatch RuleStatement Group Rule Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- and_statement RuleGroup Rule Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byte_match_ Rulestatement Group Rule Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geo_match_ Rulestatement Group Rule Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ip_set_ Rulereference_ statement Group Rule Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- label_match_ Rulestatement Group Rule Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- not_statement RuleGroup Rule Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- or_statement RuleGroup Rule Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- rate_based_ Rulestatement Group Rule Statement Rate Based Statement 
- A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. See Rate Based Statement below for details.
- regex_match_ Rulestatement Group Rule Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regex_pattern_ Ruleset_ reference_ statement Group Rule Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- size_constraint_ Rulestatement Group Rule Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqli_match_ Rulestatement Group Rule Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xss_match_ Rulestatement Group Rule Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- andStatement Property Map
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byteMatch Property MapStatement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geoMatch Property MapStatement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ipSet Property MapReference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- labelMatch Property MapStatement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- notStatement Property Map
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- orStatement Property Map
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- rateBased Property MapStatement 
- A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any5-minutetime span. This statement can not be nested. See Rate Based Statement below for details.
- regexMatch Property MapStatement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regexPattern Property MapSet Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- sizeConstraint Property MapStatement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqliMatch Property MapStatement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xssMatch Property MapStatement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
RuleGroupRuleStatementAndStatement, RuleGroupRuleStatementAndStatementArgs            
- Statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- Statements
[]RuleGroup Rule Statement 
- The statements to combine.
- statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- statements
RuleGroup Rule Statement[] 
- The statements to combine.
- statements
Sequence[RuleGroup Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
RuleGroupRuleStatementByteMatchStatement, RuleGroupRuleStatementByteMatchStatementArgs              
- PositionalConstraint string
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations List<RuleGroup Rule Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- PositionalConstraint string
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations []RuleGroup Rule Statement Byte Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positionalConstraint String
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<RuleGroup Rule Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positionalConstraint string
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString string
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations RuleGroup Rule Statement Byte Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positional_constraint str
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- search_string str
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- text_transformations Sequence[RuleGroup Rule Statement Byte Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positionalConstraint String
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementByteMatchStatementFieldToMatch, RuleGroupRuleStatementByteMatchStatementFieldToMatchArgs                    
- AllQuery RuleArguments Group Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Byte Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Byte Match Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Byte Match Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Byte Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Byte Match Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Byte Match Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Byte Match Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Byte Match Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementByteMatchStatementFieldToMatchBody, RuleGroupRuleStatementByteMatchStatementFieldToMatchBodyArgs                      
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementByteMatchStatementFieldToMatchCookies, RuleGroupRuleStatementByteMatchStatementFieldToMatchCookiesArgs                      
- MatchPatterns List<RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementByteMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs                          
- All
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementByteMatchStatementFieldToMatchHeader, RuleGroupRuleStatementByteMatchStatementFieldToMatchHeaderArgs                      
- MatchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementByteMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs                          
- All
RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementByteMatchStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementByteMatchStatementFieldToMatchHeaderOrderArgs                        
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementByteMatchStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementByteMatchStatementFieldToMatchJa3FingerprintArgs                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementByteMatchStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementByteMatchStatementFieldToMatchJa4FingerprintArgs                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementByteMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementByteMatchStatementFieldToMatchJsonBodyArgs                        
- MatchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs                            
- All
RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementByteMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementByteMatchStatementFieldToMatchSingleHeaderArgs                        
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementByteMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs                          
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementByteMatchStatementTextTransformation, RuleGroupRuleStatementByteMatchStatementTextTransformationArgs                  
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementGeoMatchStatement, RuleGroupRuleStatementGeoMatchStatementArgs              
- CountryCodes List<string>
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp RuleConfig Group Rule Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- CountryCodes []string
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp RuleConfig Group Rule Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- countryCodes List<String>
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp RuleConfig Group Rule Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- countryCodes string[]
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp RuleConfig Group Rule Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- country_codes Sequence[str]
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwarded_ip_ Ruleconfig Group Rule Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- countryCodes List<String>
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp Property MapConfig 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
RuleGroupRuleStatementGeoMatchStatementForwardedIpConfig, RuleGroupRuleStatementGeoMatchStatementForwardedIpConfigArgs                    
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- The name of the HTTP header to use for the IP address.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- The name of the HTTP header to use for the IP address.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
RuleGroupRuleStatementIpSetReferenceStatement, RuleGroupRuleStatementIpSetReferenceStatementArgs                
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet RuleForwarded Ip Config Group Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet RuleForwarded Ip Config Group Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet RuleForwarded Ip Config Group Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet RuleForwarded Ip Config Group Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn str
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ip_set_ Ruleforwarded_ ip_ config Group Rule Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet Property MapForwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
RuleGroupRuleStatementIpSetReferenceStatementIpSetForwardedIpConfig, RuleGroupRuleStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs                          
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- Position string
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- Position string
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- position String
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- The name of the HTTP header to use for the IP address.
- position string
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- The name of the HTTP header to use for the IP address.
- position str
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- position String
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
RuleGroupRuleStatementLabelMatchStatement, RuleGroupRuleStatementLabelMatchStatementArgs              
RuleGroupRuleStatementNotStatement, RuleGroupRuleStatementNotStatementArgs            
- Statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- Statements
[]RuleGroup Rule Statement 
- The statements to combine.
- statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- statements
RuleGroup Rule Statement[] 
- The statements to combine.
- statements
Sequence[RuleGroup Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
RuleGroupRuleStatementOrStatement, RuleGroupRuleStatementOrStatementArgs            
- Statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- Statements
[]RuleGroup Rule Statement 
- The statements to combine.
- statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- statements
RuleGroup Rule Statement[] 
- The statements to combine.
- statements
Sequence[RuleGroup Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
RuleGroupRuleStatementRateBasedStatement, RuleGroupRuleStatementRateBasedStatementArgs              
- Limit int
- The limit on requests per 5-minute period for a single originating IP address.
- AggregateKey stringType 
- Setting that indicates how to aggregate the request counts. Valid values include: CONSTANT,CUSTOM_KEYS,FORWARDED_IPorIP. Default:IP.
- CustomKeys List<RuleGroup Rule Statement Rate Based Statement Custom Key> 
- Aggregate the request counts using one or more web request components as the aggregate keys. See custom_keybelow for details.
- EvaluationWindow intSec 
- The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. Valid values are - 60,- 120,- 300, and- 600. Defaults to- 300(5 minutes).- NOTE: This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds. 
- ForwardedIp RuleConfig Group Rule Statement Rate Based Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. If aggregate_key_typeis set toFORWARDED_IP, this block is required. See Forwarded IP Config below for details.
- ScopeDown RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement 
- An optional nested statement that narrows the scope of the rate-based statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See Statement above for details. If aggregate_key_typeis set toCONSTANT, this block is required.
- Limit int
- The limit on requests per 5-minute period for a single originating IP address.
- AggregateKey stringType 
- Setting that indicates how to aggregate the request counts. Valid values include: CONSTANT,CUSTOM_KEYS,FORWARDED_IPorIP. Default:IP.
- CustomKeys []RuleGroup Rule Statement Rate Based Statement Custom Key 
- Aggregate the request counts using one or more web request components as the aggregate keys. See custom_keybelow for details.
- EvaluationWindow intSec 
- The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. Valid values are - 60,- 120,- 300, and- 600. Defaults to- 300(5 minutes).- NOTE: This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds. 
- ForwardedIp RuleConfig Group Rule Statement Rate Based Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. If aggregate_key_typeis set toFORWARDED_IP, this block is required. See Forwarded IP Config below for details.
- ScopeDown RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement 
- An optional nested statement that narrows the scope of the rate-based statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See Statement above for details. If aggregate_key_typeis set toCONSTANT, this block is required.
- limit Integer
- The limit on requests per 5-minute period for a single originating IP address.
- aggregateKey StringType 
- Setting that indicates how to aggregate the request counts. Valid values include: CONSTANT,CUSTOM_KEYS,FORWARDED_IPorIP. Default:IP.
- customKeys List<RuleGroup Rule Statement Rate Based Statement Custom Key> 
- Aggregate the request counts using one or more web request components as the aggregate keys. See custom_keybelow for details.
- evaluationWindow IntegerSec 
- The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. Valid values are - 60,- 120,- 300, and- 600. Defaults to- 300(5 minutes).- NOTE: This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds. 
- forwardedIp RuleConfig Group Rule Statement Rate Based Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. If aggregate_key_typeis set toFORWARDED_IP, this block is required. See Forwarded IP Config below for details.
- scopeDown RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement 
- An optional nested statement that narrows the scope of the rate-based statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See Statement above for details. If aggregate_key_typeis set toCONSTANT, this block is required.
- limit number
- The limit on requests per 5-minute period for a single originating IP address.
- aggregateKey stringType 
- Setting that indicates how to aggregate the request counts. Valid values include: CONSTANT,CUSTOM_KEYS,FORWARDED_IPorIP. Default:IP.
- customKeys RuleGroup Rule Statement Rate Based Statement Custom Key[] 
- Aggregate the request counts using one or more web request components as the aggregate keys. See custom_keybelow for details.
- evaluationWindow numberSec 
- The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. Valid values are - 60,- 120,- 300, and- 600. Defaults to- 300(5 minutes).- NOTE: This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds. 
- forwardedIp RuleConfig Group Rule Statement Rate Based Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. If aggregate_key_typeis set toFORWARDED_IP, this block is required. See Forwarded IP Config below for details.
- scopeDown RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement 
- An optional nested statement that narrows the scope of the rate-based statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See Statement above for details. If aggregate_key_typeis set toCONSTANT, this block is required.
- limit int
- The limit on requests per 5-minute period for a single originating IP address.
- aggregate_key_ strtype 
- Setting that indicates how to aggregate the request counts. Valid values include: CONSTANT,CUSTOM_KEYS,FORWARDED_IPorIP. Default:IP.
- custom_keys Sequence[RuleGroup Rule Statement Rate Based Statement Custom Key] 
- Aggregate the request counts using one or more web request components as the aggregate keys. See custom_keybelow for details.
- evaluation_window_ intsec 
- The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. Valid values are - 60,- 120,- 300, and- 600. Defaults to- 300(5 minutes).- NOTE: This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds. 
- forwarded_ip_ Ruleconfig Group Rule Statement Rate Based Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. If aggregate_key_typeis set toFORWARDED_IP, this block is required. See Forwarded IP Config below for details.
- scope_down_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement 
- An optional nested statement that narrows the scope of the rate-based statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See Statement above for details. If aggregate_key_typeis set toCONSTANT, this block is required.
- limit Number
- The limit on requests per 5-minute period for a single originating IP address.
- aggregateKey StringType 
- Setting that indicates how to aggregate the request counts. Valid values include: CONSTANT,CUSTOM_KEYS,FORWARDED_IPorIP. Default:IP.
- customKeys List<Property Map>
- Aggregate the request counts using one or more web request components as the aggregate keys. See custom_keybelow for details.
- evaluationWindow NumberSec 
- The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. Valid values are - 60,- 120,- 300, and- 600. Defaults to- 300(5 minutes).- NOTE: This setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds. 
- forwardedIp Property MapConfig 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. If aggregate_key_typeis set toFORWARDED_IP, this block is required. See Forwarded IP Config below for details.
- scopeDown Property MapStatement 
- An optional nested statement that narrows the scope of the rate-based statement to matching web requests. This can be any nestable statement, and you can nest statements at any level below this scope-down statement. See Statement above for details. If aggregate_key_typeis set toCONSTANT, this block is required.
RuleGroupRuleStatementRateBasedStatementCustomKey, RuleGroupRuleStatementRateBasedStatementCustomKeyArgs                  
- 
RuleGroup Rule Statement Rate Based Statement Custom Key Cookie 
- (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit cookiebelow for details.
- ForwardedIp RuleGroup Rule Statement Rate Based Statement Custom Key Forwarded Ip 
- (Optional) Use the first IP address in an HTTP header as an aggregate key. See forwarded_ipbelow for details.
- Header
RuleGroup Rule Statement Rate Based Statement Custom Key Header 
- (Optional) Use the value of a header in the request as an aggregate key. See RateLimit headerbelow for details.
- HttpMethod RuleGroup Rule Statement Rate Based Statement Custom Key Http Method 
- (Optional) Use the request's HTTP method as an aggregate key. See RateLimit http_methodbelow for details.
- Ip
RuleGroup Rule Statement Rate Based Statement Custom Key Ip 
- (Optional) Use the request's originating IP address as an aggregate key. See RateLimit ipbelow for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja3Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja4Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- LabelNamespace RuleGroup Rule Statement Rate Based Statement Custom Key Label Namespace 
- (Optional) Use the specified label namespace as an aggregate key. See RateLimit label_namespacebelow for details.
- QueryArgument RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument 
- (Optional) Use the specified query argument as an aggregate key. See RateLimit query_argumentbelow for details.
- QueryString RuleGroup Rule Statement Rate Based Statement Custom Key Query String 
- (Optional) Use the request's query string as an aggregate key. See RateLimit query_stringbelow for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path 
- (Optional) Use the request's URI path as an aggregate key. See RateLimit uri_pathbelow for details.
- 
RuleGroup Rule Statement Rate Based Statement Custom Key Cookie 
- (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit cookiebelow for details.
- ForwardedIp RuleGroup Rule Statement Rate Based Statement Custom Key Forwarded Ip 
- (Optional) Use the first IP address in an HTTP header as an aggregate key. See forwarded_ipbelow for details.
- Header
RuleGroup Rule Statement Rate Based Statement Custom Key Header 
- (Optional) Use the value of a header in the request as an aggregate key. See RateLimit headerbelow for details.
- HttpMethod RuleGroup Rule Statement Rate Based Statement Custom Key Http Method 
- (Optional) Use the request's HTTP method as an aggregate key. See RateLimit http_methodbelow for details.
- Ip
RuleGroup Rule Statement Rate Based Statement Custom Key Ip 
- (Optional) Use the request's originating IP address as an aggregate key. See RateLimit ipbelow for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja3Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja4Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- LabelNamespace RuleGroup Rule Statement Rate Based Statement Custom Key Label Namespace 
- (Optional) Use the specified label namespace as an aggregate key. See RateLimit label_namespacebelow for details.
- QueryArgument RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument 
- (Optional) Use the specified query argument as an aggregate key. See RateLimit query_argumentbelow for details.
- QueryString RuleGroup Rule Statement Rate Based Statement Custom Key Query String 
- (Optional) Use the request's query string as an aggregate key. See RateLimit query_stringbelow for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path 
- (Optional) Use the request's URI path as an aggregate key. See RateLimit uri_pathbelow for details.
- 
RuleGroup Rule Statement Rate Based Statement Custom Key Cookie 
- (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit cookiebelow for details.
- forwardedIp RuleGroup Rule Statement Rate Based Statement Custom Key Forwarded Ip 
- (Optional) Use the first IP address in an HTTP header as an aggregate key. See forwarded_ipbelow for details.
- header
RuleGroup Rule Statement Rate Based Statement Custom Key Header 
- (Optional) Use the value of a header in the request as an aggregate key. See RateLimit headerbelow for details.
- httpMethod RuleGroup Rule Statement Rate Based Statement Custom Key Http Method 
- (Optional) Use the request's HTTP method as an aggregate key. See RateLimit http_methodbelow for details.
- ip
RuleGroup Rule Statement Rate Based Statement Custom Key Ip 
- (Optional) Use the request's originating IP address as an aggregate key. See RateLimit ipbelow for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja3Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja4Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- labelNamespace RuleGroup Rule Statement Rate Based Statement Custom Key Label Namespace 
- (Optional) Use the specified label namespace as an aggregate key. See RateLimit label_namespacebelow for details.
- queryArgument RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument 
- (Optional) Use the specified query argument as an aggregate key. See RateLimit query_argumentbelow for details.
- queryString RuleGroup Rule Statement Rate Based Statement Custom Key Query String 
- (Optional) Use the request's query string as an aggregate key. See RateLimit query_stringbelow for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path 
- (Optional) Use the request's URI path as an aggregate key. See RateLimit uri_pathbelow for details.
- 
RuleGroup Rule Statement Rate Based Statement Custom Key Cookie 
- (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit cookiebelow for details.
- forwardedIp RuleGroup Rule Statement Rate Based Statement Custom Key Forwarded Ip 
- (Optional) Use the first IP address in an HTTP header as an aggregate key. See forwarded_ipbelow for details.
- header
RuleGroup Rule Statement Rate Based Statement Custom Key Header 
- (Optional) Use the value of a header in the request as an aggregate key. See RateLimit headerbelow for details.
- httpMethod RuleGroup Rule Statement Rate Based Statement Custom Key Http Method 
- (Optional) Use the request's HTTP method as an aggregate key. See RateLimit http_methodbelow for details.
- ip
RuleGroup Rule Statement Rate Based Statement Custom Key Ip 
- (Optional) Use the request's originating IP address as an aggregate key. See RateLimit ipbelow for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja3Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Custom Key Ja4Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- labelNamespace RuleGroup Rule Statement Rate Based Statement Custom Key Label Namespace 
- (Optional) Use the specified label namespace as an aggregate key. See RateLimit label_namespacebelow for details.
- queryArgument RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument 
- (Optional) Use the specified query argument as an aggregate key. See RateLimit query_argumentbelow for details.
- queryString RuleGroup Rule Statement Rate Based Statement Custom Key Query String 
- (Optional) Use the request's query string as an aggregate key. See RateLimit query_stringbelow for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path 
- (Optional) Use the request's URI path as an aggregate key. See RateLimit uri_pathbelow for details.
- 
RuleGroup Rule Statement Rate Based Statement Custom Key Cookie 
- (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit cookiebelow for details.
- forwarded_ip RuleGroup Rule Statement Rate Based Statement Custom Key Forwarded Ip 
- (Optional) Use the first IP address in an HTTP header as an aggregate key. See forwarded_ipbelow for details.
- header
RuleGroup Rule Statement Rate Based Statement Custom Key Header 
- (Optional) Use the value of a header in the request as an aggregate key. See RateLimit headerbelow for details.
- http_method RuleGroup Rule Statement Rate Based Statement Custom Key Http Method 
- (Optional) Use the request's HTTP method as an aggregate key. See RateLimit http_methodbelow for details.
- ip
RuleGroup Rule Statement Rate Based Statement Custom Key Ip 
- (Optional) Use the request's originating IP address as an aggregate key. See RateLimit ipbelow for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Custom Key Ja3Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Custom Key Ja4Fingerprint 
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- label_namespace RuleGroup Rule Statement Rate Based Statement Custom Key Label Namespace 
- (Optional) Use the specified label namespace as an aggregate key. See RateLimit label_namespacebelow for details.
- query_argument RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument 
- (Optional) Use the specified query argument as an aggregate key. See RateLimit query_argumentbelow for details.
- query_string RuleGroup Rule Statement Rate Based Statement Custom Key Query String 
- (Optional) Use the request's query string as an aggregate key. See RateLimit query_stringbelow for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path 
- (Optional) Use the request's URI path as an aggregate key. See RateLimit uri_pathbelow for details.
- Property Map
- (Optional) Use the value of a cookie in the request as an aggregate key. See RateLimit cookiebelow for details.
- forwardedIp Property Map
- (Optional) Use the first IP address in an HTTP header as an aggregate key. See forwarded_ipbelow for details.
- header Property Map
- (Optional) Use the value of a header in the request as an aggregate key. See RateLimit headerbelow for details.
- httpMethod Property Map
- (Optional) Use the request's HTTP method as an aggregate key. See RateLimit http_methodbelow for details.
- ip Property Map
- (Optional) Use the request's originating IP address as an aggregate key. See RateLimit ipbelow for details.
- ja3Fingerprint Property Map
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- ja4Fingerprint Property Map
- (Optional) Use the JA3 fingerprint in the request as an aggregate key. See RateLimit ipbelow for details.
- labelNamespace Property Map
- (Optional) Use the specified label namespace as an aggregate key. See RateLimit label_namespacebelow for details.
- queryArgument Property Map
- (Optional) Use the specified query argument as an aggregate key. See RateLimit query_argumentbelow for details.
- queryString Property Map
- (Optional) Use the request's query string as an aggregate key. See RateLimit query_stringbelow for details.
- uriPath Property Map
- (Optional) Use the request's URI path as an aggregate key. See RateLimit uri_pathbelow for details.
RuleGroupRuleStatementRateBasedStatementCustomKeyCookie, RuleGroupRuleStatementRateBasedStatementCustomKeyCookieArgs                    
- Name string
- A friendly name of the rule group.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Cookie Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- Name string
- A friendly name of the rule group.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Custom Key Cookie Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name String
- A friendly name of the rule group.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Cookie Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name string
- A friendly name of the rule group.
- textTransformations RuleGroup Rule Statement Rate Based Statement Custom Key Cookie Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name str
- A friendly name of the rule group.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Custom Key Cookie Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name String
- A friendly name of the rule group.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
RuleGroupRuleStatementRateBasedStatementCustomKeyCookieTextTransformation, RuleGroupRuleStatementRateBasedStatementCustomKeyCookieTextTransformationArgs                        
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementCustomKeyHeader, RuleGroupRuleStatementRateBasedStatementCustomKeyHeaderArgs                    
- Name string
- A friendly name of the rule group.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Header Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- Name string
- A friendly name of the rule group.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Custom Key Header Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name String
- A friendly name of the rule group.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Header Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name string
- A friendly name of the rule group.
- textTransformations RuleGroup Rule Statement Rate Based Statement Custom Key Header Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name str
- A friendly name of the rule group.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Custom Key Header Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name String
- A friendly name of the rule group.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
RuleGroupRuleStatementRateBasedStatementCustomKeyHeaderTextTransformation, RuleGroupRuleStatementRateBasedStatementCustomKeyHeaderTextTransformationArgs                        
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementCustomKeyJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementCustomKeyJa3FingerprintArgs                    
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementCustomKeyJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementCustomKeyJa4FingerprintArgs                    
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementCustomKeyLabelNamespace, RuleGroupRuleStatementRateBasedStatementCustomKeyLabelNamespaceArgs                      
- Namespace string
- The namespace to use for aggregation
- Namespace string
- The namespace to use for aggregation
- namespace String
- The namespace to use for aggregation
- namespace string
- The namespace to use for aggregation
- namespace str
- The namespace to use for aggregation
- namespace String
- The namespace to use for aggregation
RuleGroupRuleStatementRateBasedStatementCustomKeyQueryArgument, RuleGroupRuleStatementRateBasedStatementCustomKeyQueryArgumentArgs                      
- Name string
- A friendly name of the rule group.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- Name string
- A friendly name of the rule group.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name String
- A friendly name of the rule group.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name string
- A friendly name of the rule group.
- textTransformations RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name str
- A friendly name of the rule group.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Custom Key Query Argument Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- name String
- A friendly name of the rule group.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
RuleGroupRuleStatementRateBasedStatementCustomKeyQueryArgumentTextTransformation, RuleGroupRuleStatementRateBasedStatementCustomKeyQueryArgumentTextTransformationArgs                          
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementCustomKeyQueryString, RuleGroupRuleStatementRateBasedStatementCustomKeyQueryStringArgs                      
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Query String Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Custom Key Query String Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Query String Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- textTransformations RuleGroup Rule Statement Rate Based Statement Custom Key Query String Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Custom Key Query String Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
RuleGroupRuleStatementRateBasedStatementCustomKeyQueryStringTextTransformation, RuleGroupRuleStatementRateBasedStatementCustomKeyQueryStringTextTransformationArgs                          
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementCustomKeyUriPath, RuleGroupRuleStatementRateBasedStatementCustomKeyUriPathArgs                      
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- textTransformations RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Custom Key Uri Path Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. They are used in rate-based rule statements, to transform request components before using them as custom aggregation keys. Atleast one transformation is required. See Text Transformation above for details.
RuleGroupRuleStatementRateBasedStatementCustomKeyUriPathTextTransformation, RuleGroupRuleStatementRateBasedStatementCustomKeyUriPathTextTransformationArgs                          
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementForwardedIpConfig, RuleGroupRuleStatementRateBasedStatementForwardedIpConfigArgs                    
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- The name of the HTTP header to use for the IP address.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- The name of the HTTP header to use for the IP address.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
RuleGroupRuleStatementRateBasedStatementScopeDownStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementArgs                    
- AndStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- ByteMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- GeoMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- IpSet RuleReference Statement Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- LabelMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- NotStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- OrStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- RegexMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- RegexPattern RuleSet Reference Statement Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- SizeConstraint RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- SqliMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- XssMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- AndStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- ByteMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- GeoMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- IpSet RuleReference Statement Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- LabelMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- NotStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- OrStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- RegexMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- RegexPattern RuleSet Reference Statement Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- SizeConstraint RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- SqliMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- XssMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- andStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byteMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geoMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ipSet RuleReference Statement Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- labelMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- notStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- orStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- regexMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regexPattern RuleSet Reference Statement Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- sizeConstraint RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqliMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xssMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- andStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byteMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geoMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ipSet RuleReference Statement Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- labelMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- notStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- orStatement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- regexMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regexPattern RuleSet Reference Statement Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- sizeConstraint RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqliMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xssMatch RuleStatement Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- and_statement RuleGroup Rule Statement Rate Based Statement Scope Down Statement And Statement 
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byte_match_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geo_match_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ip_set_ Rulereference_ statement Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- label_match_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Label Match Statement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- not_statement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Not Statement 
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- or_statement RuleGroup Rule Statement Rate Based Statement Scope Down Statement Or Statement 
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- regex_match_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regex_pattern_ Ruleset_ reference_ statement Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- size_constraint_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqli_match_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xss_match_ Rulestatement Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
- andStatement Property Map
- A logical rule statement used to combine other rule statements with AND logic. See AND Statement below for details.
- byteMatch Property MapStatement 
- A rule statement that defines a string match search for AWS WAF to apply to web requests. See Byte Match Statement below for details.
- geoMatch Property MapStatement 
- A rule statement used to identify web requests based on country of origin. See GEO Match Statement below for details.
- ipSet Property MapReference Statement 
- A rule statement used to detect web requests coming from particular IP addresses or address ranges. See IP Set Reference Statement below for details.
- labelMatch Property MapStatement 
- A rule statement that defines a string match search against labels that have been added to the web request by rules that have already run in the web ACL. See Label Match Statement below for details.
- notStatement Property Map
- A logical rule statement used to negate the results of another rule statement. See NOT Statement below for details.
- orStatement Property Map
- A logical rule statement used to combine other rule statements with OR logic. See OR Statement below for details.
- regexMatch Property MapStatement 
- A rule statement used to search web request components for a match against a single regular expression. See Regex Match Statement below for details.
- regexPattern Property MapSet Reference Statement 
- A rule statement used to search web request components for matches with regular expressions. See Regex Pattern Set Reference Statement below for details.
- sizeConstraint Property MapStatement 
- A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). See Size Constraint Statement below for more details.
- sqliMatch Property MapStatement 
- An SQL injection match condition identifies the part of web requests, such as the URI or the query string, that you want AWS WAF to inspect. See SQL Injection Match Statement below for details.
- xssMatch Property MapStatement 
- A rule statement that defines a cross-site scripting (XSS) match search for AWS WAF to apply to web requests. See XSS Match Statement below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementAndStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementAndStatementArgs                        
- Statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- Statements
[]RuleGroup Rule Statement 
- The statements to combine.
- statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- statements
RuleGroup Rule Statement[] 
- The statements to combine.
- statements
Sequence[RuleGroup Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementArgs                          
- PositionalConstraint string
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- PositionalConstraint string
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- SearchString string
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positionalConstraint String
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positionalConstraint string
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString string
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positional_constraint str
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- search_string str
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- positionalConstraint String
- The area within the portion of a web request that you want AWS WAF to search for search_string. Valid values include the following:EXACTLY,STARTS_WITH,ENDS_WITH,CONTAINS,CONTAINS_WORD. See the AWS documentation for more information.
- searchString String
- A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in field_to_match. The maximum length of the value is 50 bytes.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatch, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchArgs                                
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchBodyArgs                                  
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchCookies, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchCookiesArgs                                  
- MatchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchCookiesMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderArgs                                  
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchHeaderOrderArgs                                    
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJa3FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJa4FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBodyArgs                                    
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                        
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Byte Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchSingleHeaderArgs                                    
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementFieldToMatchSingleQueryArgumentArgs                                      
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementTextTransformation, RuleGroupRuleStatementRateBasedStatementScopeDownStatementByteMatchStatementTextTransformationArgs                              
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementArgs                          
- CountryCodes List<string>
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp RuleConfig Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- CountryCodes []string
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- ForwardedIp RuleConfig Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- countryCodes List<String>
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp RuleConfig Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- countryCodes string[]
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp RuleConfig Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- country_codes Sequence[str]
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwarded_ip_ Ruleconfig Group Rule Statement Rate Based Statement Scope Down Statement Geo Match Statement Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
- countryCodes List<String>
- An array of two-character country codes, for example, [ "US", "CN" ], from the alpha-2 country ISO codes of the ISO 3166international standard. See the documentation for valid values.
- forwardedIp Property MapConfig 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See Forwarded IP Config below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementForwardedIpConfig, RuleGroupRuleStatementRateBasedStatementScopeDownStatementGeoMatchStatementForwardedIpConfigArgs                                
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- The name of the HTTP header to use for the IP address.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- The name of the HTTP header to use for the IP address.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementIpSetReferenceStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementIpSetReferenceStatementArgs                            
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet RuleForwarded Ip Config Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- Arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- IpSet RuleForwarded Ip Config Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet RuleForwarded Ip Config Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn string
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet RuleForwarded Ip Config Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn str
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ip_set_ Ruleforwarded_ ip_ config Group Rule Statement Rate Based Statement Scope Down Statement Ip Set Reference Statement Ip Set Forwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
- arn String
- The Amazon Resource Name (ARN) of the IP Set that this statement references.
- ipSet Property MapForwarded Ip Config 
- The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. See IPSet Forwarded IP Config below for more details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementIpSetReferenceStatementIpSetForwardedIpConfig, RuleGroupRuleStatementRateBasedStatementScopeDownStatementIpSetReferenceStatementIpSetForwardedIpConfigArgs                                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- Position string
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- HeaderName string
- The name of the HTTP header to use for the IP address.
- Position string
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- position String
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName string
- The name of the HTTP header to use for the IP address.
- position string
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- header_name str
- The name of the HTTP header to use for the IP address.
- position str
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a valid IP address in the specified position. Valid values include: MATCHorNO_MATCH.
- headerName String
- The name of the HTTP header to use for the IP address.
- position String
- The position in the header to search for the IP address. Valid values include: FIRST,LAST, orANY. IfANYis specified and the header contains more than 10 IP addresses, AWS WAFv2 inspects the last 10.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementLabelMatchStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementLabelMatchStatementArgs                          
RuleGroupRuleStatementRateBasedStatementScopeDownStatementNotStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementNotStatementArgs                        
- Statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- Statements
[]RuleGroup Rule Statement 
- The statements to combine.
- statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- statements
RuleGroup Rule Statement[] 
- The statements to combine.
- statements
Sequence[RuleGroup Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementOrStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementOrStatementArgs                        
- Statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- Statements
[]RuleGroup Rule Statement 
- The statements to combine.
- statements
List<RuleGroup Rule Statement> 
- The statements to combine.
- statements
RuleGroup Rule Statement[] 
- The statements to combine.
- statements
Sequence[RuleGroup Rule Statement] 
- The statements to combine.
- statements List<Property Map>
- The statements to combine.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementArgs                          
- RegexString string
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- RegexString string
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regexString String
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regexString string
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- textTransformations RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regex_string str
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regexString String
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatch, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchArgs                                
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchBodyArgs                                  
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchCookies, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchCookiesArgs                                  
- MatchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderArgs                                  
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchHeaderOrderArgs                                    
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJa3FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJa4FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBodyArgs                                    
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                        
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleHeaderArgs                                    
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs                                      
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementTextTransformation, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexMatchStatementTextTransformationArgs                              
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementArgs                              
- Arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- Arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn String
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn str
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn String
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatch, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchArgs                                    
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs                                      
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookies, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs                                      
- MatchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs                                          
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs                                      
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs                                          
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchHeaderOrderArgs                                        
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa3FingerprintArgs                                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJa4FingerprintArgs                                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs                                        
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs                                            
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs                                        
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs                                          
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementTextTransformation, RuleGroupRuleStatementRateBasedStatementScopeDownStatementRegexPatternSetReferenceStatementTextTransformationArgs                                  
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementArgs                          
- ComparisonOperator string
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- Size int
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- ComparisonOperator string
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- Size int
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparisonOperator String
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size Integer
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparisonOperator string
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size number
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparison_operator str
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size int
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparisonOperator String
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size Number
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatch, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchArgs                                
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchBodyArgs                                  
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookies, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookiesArgs                                  
- MatchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderArgs                                  
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchHeaderOrderArgs                                    
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa3FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJa4FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBodyArgs                                    
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchJsonBodyMatchPatternArgs                                        
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Size Constraint Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleHeaderArgs                                    
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementFieldToMatchSingleQueryArgumentArgs                                      
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementTextTransformation, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSizeConstraintStatementTextTransformationArgs                              
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementArgs                          
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- SensitivityLevel string
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- SensitivityLevel string
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- sensitivityLevel String
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- textTransformations RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- sensitivityLevel string
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- sensitivity_level str
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- sensitivityLevel String
- Sensitivity that you want AWS WAF to use to inspect for SQL injection attacks. Valid values include: LOW,HIGH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatch, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchArgs                                
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchBodyArgs                                  
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchCookies, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchCookiesArgs                                  
- MatchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchCookiesMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderArgs                                  
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchHeaderOrderArgs                                    
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJa3FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJa4FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBodyArgs                                    
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                        
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Sqli Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleHeaderArgs                                    
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementFieldToMatchSingleQueryArgumentArgs                                      
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementTextTransformation, RuleGroupRuleStatementRateBasedStatementScopeDownStatementSqliMatchStatementTextTransformationArgs                              
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatement, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementArgs                          
- TextTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- TextTransformations []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- textTransformations List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- textTransformations RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- text_transformations Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatch, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchArgs                                
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchBodyArgs                                  
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchCookies, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchCookiesArgs                                  
- MatchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchCookiesMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderArgs                                  
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderMatchPatternArgs                                      
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchHeaderOrderArgs                                    
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJa3FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJa4FingerprintArgs                                  
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJsonBodyArgs                                    
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchJsonBodyMatchPatternArgs                                        
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Rate Based Statement Scope Down Statement Xss Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchSingleHeaderArgs                                    
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementFieldToMatchSingleQueryArgumentArgs                                      
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementTextTransformation, RuleGroupRuleStatementRateBasedStatementScopeDownStatementXssMatchStatementTextTransformationArgs                              
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRegexMatchStatement, RuleGroupRuleStatementRegexMatchStatementArgs              
- RegexString string
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- TextTransformations List<RuleGroup Rule Statement Regex Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- RegexString string
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- TextTransformations []RuleGroup Rule Statement Regex Match Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regexString String
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- textTransformations List<RuleGroup Rule Statement Regex Match Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regexString string
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- textTransformations RuleGroup Rule Statement Regex Match Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regex_string str
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- text_transformations Sequence[RuleGroup Rule Statement Regex Match Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Regex Match Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- regexString String
- The string representing the regular expression. Note: The fixed quota for the maximum number of characters in each regex pattern is 200, which can't be changed. See AWS WAF quotas for details.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRegexMatchStatementFieldToMatch, RuleGroupRuleStatementRegexMatchStatementFieldToMatchArgs                    
- AllQuery RuleArguments Group Rule Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Regex Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Regex Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Regex Match Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Regex Match Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Regex Match Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Regex Match Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Regex Match Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Regex Match Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Regex Match Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Regex Match Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Regex Match Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Regex Match Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Regex Match Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Regex Match Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Regex Match Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Regex Match Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Regex Match Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Regex Match Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Regex Match Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Regex Match Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchBody, RuleGroupRuleStatementRegexMatchStatementFieldToMatchBodyArgs                      
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRegexMatchStatementFieldToMatchCookies, RuleGroupRuleStatementRegexMatchStatementFieldToMatchCookiesArgs                      
- MatchPatterns List<RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRegexMatchStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRegexMatchStatementFieldToMatchCookiesMatchPatternArgs                          
- All
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRegexMatchStatementFieldToMatchHeader, RuleGroupRuleStatementRegexMatchStatementFieldToMatchHeaderArgs                      
- MatchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRegexMatchStatementFieldToMatchHeaderMatchPatternArgs                          
- All
RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRegexMatchStatementFieldToMatchHeaderOrderArgs                        
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRegexMatchStatementFieldToMatchJa3FingerprintArgs                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRegexMatchStatementFieldToMatchJa4FingerprintArgs                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchJsonBody, RuleGroupRuleStatementRegexMatchStatementFieldToMatchJsonBodyArgs                        
- MatchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRegexMatchStatementFieldToMatchJsonBodyMatchPatternArgs                            
- All
RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Regex Match Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRegexMatchStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRegexMatchStatementFieldToMatchSingleHeaderArgs                        
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRegexMatchStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRegexMatchStatementFieldToMatchSingleQueryArgumentArgs                          
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRegexMatchStatementTextTransformation, RuleGroupRuleStatementRegexMatchStatementTextTransformationArgs                  
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementRegexPatternSetReferenceStatement, RuleGroupRuleStatementRegexPatternSetReferenceStatementArgs                  
- Arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- TextTransformations List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- Arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- TextTransformations []RuleGroup Rule Statement Regex Pattern Set Reference Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn String
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn string
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations RuleGroup Rule Statement Regex Pattern Set Reference Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn str
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- text_transformations Sequence[RuleGroup Rule Statement Regex Pattern Set Reference Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Regex Pattern Set Reference Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- arn String
- The Amazon Resource Name (ARN) of the Regex Pattern Set that this statement references.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatch, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchArgs                        
- AllQuery RuleArguments Group Rule Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Regex Pattern Set Reference Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Regex Pattern Set Reference Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchBody, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchBodyArgs                          
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchCookies, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchCookiesArgs                          
- MatchPatterns List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchCookiesMatchPatternArgs                              
- All
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchHeader, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchHeaderArgs                          
- MatchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchHeaderMatchPatternArgs                              
- All
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchHeaderOrderArgs                            
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJa3FingerprintArgs                          
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJa4FingerprintArgs                          
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJsonBody, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyArgs                            
- MatchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- MatchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- MatchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- InvalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- OversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope string
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback stringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling string
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- match_pattern RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern 
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- match_scope str
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalid_fallback_ strbehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversize_handling str
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
- matchPattern Property Map
- The patterns to look for in the JSON body. You must specify exactly one setting: either allorincluded_paths. See JsonMatchPattern for details.
- matchScope String
- The parts of the JSON to match against using the match_pattern. Valid values areALL,KEYandVALUE.
- invalidFallback StringBehavior 
- What to do when JSON parsing fails. Defaults to evaluating up to the first parsing failure. Valid values are EVALUATE_AS_STRING,MATCHandNO_MATCH.
- oversizeHandling String
- What to do if the body is larger than can be inspected. Valid values are CONTINUE(default),MATCHandNO_MATCH.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPattern, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchJsonBodyMatchPatternArgs                                
- All
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths List<string>
- All
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- IncludedPaths []string
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- includedPaths string[]
- all
RuleGroup Rule Statement Regex Pattern Set Reference Statement Field To Match Json Body Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- included_paths Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- includedPaths List<String>
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeader, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchSingleHeaderArgs                            
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgument, RuleGroupRuleStatementRegexPatternSetReferenceStatementFieldToMatchSingleQueryArgumentArgs                              
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- Name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name string
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name str
- The name of the query header to inspect. This setting must be provided as lower case characters.
- name String
- The name of the query header to inspect. This setting must be provided as lower case characters.
RuleGroupRuleStatementRegexPatternSetReferenceStatementTextTransformation, RuleGroupRuleStatementRegexPatternSetReferenceStatementTextTransformationArgs                      
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- Priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- Type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Integer
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type string
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority int
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type str
- The transformation to apply, please refer to the Text Transformation documentation for more details.
- priority Number
- The relative processing order for multiple transformations that are defined for a rule statement. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content.
- type String
- The transformation to apply, please refer to the Text Transformation documentation for more details.
RuleGroupRuleStatementSizeConstraintStatement, RuleGroupRuleStatementSizeConstraintStatementArgs              
- ComparisonOperator string
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- Size int
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- TextTransformations List<RuleGroup Rule Statement Size Constraint Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- ComparisonOperator string
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- Size int
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- TextTransformations []RuleGroup Rule Statement Size Constraint Statement Text Transformation 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- FieldTo RuleMatch Group Rule Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparisonOperator String
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size Integer
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations List<RuleGroup Rule Statement Size Constraint Statement Text Transformation> 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparisonOperator string
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size number
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations RuleGroup Rule Statement Size Constraint Statement Text Transformation[] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo RuleMatch Group Rule Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparison_operator str
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size int
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- text_transformations Sequence[RuleGroup Rule Statement Size Constraint Statement Text Transformation] 
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- field_to_ Rulematch Group Rule Statement Size Constraint Statement Field To Match 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
- comparisonOperator String
- The operator to use to compare the request part to the size setting. Valid values include: EQ,NE,LE,LT,GE, orGT.
- size Number
- The size, in bytes, to compare to the request part, after any transformations. Valid values are integers between 0 and 21474836480, inclusive.
- textTransformations List<Property Map>
- Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. At least one required. See Text Transformation below for details.
- fieldTo Property MapMatch 
- The part of a web request that you want AWS WAF to inspect. See Field to Match below for details.
RuleGroupRuleStatementSizeConstraintStatementFieldToMatch, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchArgs                    
- AllQuery RuleArguments Group Rule Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders List<RuleGroup Rule Statement Size Constraint Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- Headers
List<RuleGroup Rule Statement Size Constraint Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- AllQuery RuleArguments Group Rule Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- Body
RuleGroup Rule Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- HeaderOrders []RuleGroup Rule Statement Size Constraint Statement Field To Match Header Order 
- Inspect the request headers. See Header Order below for details.
- Headers
[]RuleGroup Rule Statement Size Constraint Statement Field To Match Header 
- Inspect the request headers. See Headers below for details.
- Ja3Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- Ja4Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- JsonBody RuleGroup Rule Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- Method
RuleGroup Rule Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- QueryString RuleGroup Rule Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- SingleHeader RuleGroup Rule Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- SingleQuery RuleArgument Group Rule Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- UriPath RuleGroup Rule Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<RuleGroup Rule Statement Size Constraint Statement Field To Match Header Order> 
- Inspect the request headers. See Header Order below for details.
- headers
List<RuleGroup Rule Statement Size Constraint Statement Field To Match Header> 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery RuleArguments Group Rule Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders RuleGroup Rule Statement Size Constraint Statement Field To Match Header Order[] 
- Inspect the request headers. See Header Order below for details.
- headers
RuleGroup Rule Statement Size Constraint Statement Field To Match Header[] 
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint
RuleGroup Rule Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody RuleGroup Rule Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString RuleGroup Rule Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader RuleGroup Rule Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- singleQuery RuleArgument Group Rule Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath RuleGroup Rule Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- all_query_ Rulearguments Group Rule Statement Size Constraint Statement Field To Match All Query Arguments 
- Inspect all query arguments.
- body
RuleGroup Rule Statement Size Constraint Statement Field To Match Body 
- Inspect the request body, which immediately follows the request headers.
- 
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies 
- Inspect the cookies in the web request. See Cookies below for details.
- header_orders Sequence[RuleGroup Rule Statement Size Constraint Statement Field To Match Header Order] 
- Inspect the request headers. See Header Order below for details.
- headers
Sequence[RuleGroup Rule Statement Size Constraint Statement Field To Match Header] 
- Inspect the request headers. See Headers below for details.
- ja3_fingerprint RuleGroup Rule Statement Size Constraint Statement Field To Match Ja3Fingerprint 
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4_fingerprint RuleGroup Rule Statement Size Constraint Statement Field To Match Ja4Fingerprint 
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- json_body RuleGroup Rule Statement Size Constraint Statement Field To Match Json Body 
- Inspect the request body as JSON. See JSON Body for details.
- method
RuleGroup Rule Statement Size Constraint Statement Field To Match Method 
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- query_string RuleGroup Rule Statement Size Constraint Statement Field To Match Query String 
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- single_header RuleGroup Rule Statement Size Constraint Statement Field To Match Single Header 
- Inspect a single header. See Single Header below for details.
- single_query_ Ruleargument Group Rule Statement Size Constraint Statement Field To Match Single Query Argument 
- Inspect a single query argument. See Single Query Argument below for details.
- uri_path RuleGroup Rule Statement Size Constraint Statement Field To Match Uri Path 
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
- allQuery Property MapArguments 
- Inspect all query arguments.
- body Property Map
- Inspect the request body, which immediately follows the request headers.
- Property Map
- Inspect the cookies in the web request. See Cookies below for details.
- headerOrders List<Property Map>
- Inspect the request headers. See Header Order below for details.
- headers List<Property Map>
- Inspect the request headers. See Headers below for details.
- ja3Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja3_fingerprintbelow for details.
- ja4Fingerprint Property Map
- Inspect the JA3 fingerprint. See ja4_fingerprintbelow for details.
- jsonBody Property Map
- Inspect the request body as JSON. See JSON Body for details.
- method Property Map
- Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform.
- queryString Property Map
- Inspect the query string. This is the part of a URL that appears after a ?character, if any.
- singleHeader Property Map
- Inspect a single header. See Single Header below for details.
- singleQuery Property MapArgument 
- Inspect a single query argument. See Single Query Argument below for details.
- uriPath Property Map
- Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchBody, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchBodyArgs                      
- OversizeHandling string
- OversizeHandling string
- oversizeHandling String
- oversizeHandling string
- oversizeHandling String
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchCookies, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchCookiesArgs                      
- MatchPatterns List<RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- MatchPatterns []RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- MatchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- OversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern> 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern[] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope string
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling string
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- match_patterns Sequence[RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern] 
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- match_scope str
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversize_handling str
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
- matchPatterns List<Property Map>
- The filter to use to identify the subset of cookies to inspect in a web request. You must specify exactly one setting: either all,included_cookiesorexcluded_cookies. More details: CookieMatchPattern
- matchScope String
- The parts of the cookies to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values: ALL,KEY,VALUE
- oversizeHandling String
- What AWS WAF should do if the cookies of the request are larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF. Valid values: CONTINUE,MATCH,NO_MATCH
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchCookiesMatchPattern, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchCookiesMatchPatternArgs                          
- All
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<string>
- List<string>
- All
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- []string
- []string
- all
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
- all
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- string[]
- string[]
- all
RuleGroup Rule Statement Size Constraint Statement Field To Match Cookies Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- Sequence[str]
- Sequence[str]
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- List<String>
- List<String>
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchHeader, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchHeaderArgs                      
- MatchPattern RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- MatchPattern RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- MatchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope string
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- match_pattern RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern 
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- match_scope str
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- matchPattern Property Map
- The filter to use to identify the subset of headers to inspect in a web request. The match_patternblock supports only one of the following arguments:
- matchScope String
- The parts of the headers to inspect with the rule inspection criteria. If you specify All, AWS WAF inspects both keys and values. Valid values include the following:ALL,Key,Value.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchHeaderMatchPattern, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchHeaderMatchPatternArgs                          
- All
RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders List<string>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders List<string>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- All
RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- ExcludedHeaders []string
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- IncludedHeaders []string
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders string[]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders string[]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all
RuleGroup Rule Statement Size Constraint Statement Field To Match Header Match Pattern All 
- An empty configuration block that is used for inspecting all headers.
- excluded_headers Sequence[str]
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- included_headers Sequence[str]
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
- all Property Map
- An empty configuration block that is used for inspecting all headers.
- excludedHeaders List<String>
- An array of strings that will be used for inspecting headers that do not have a key that matches one of the provided values.
- includedHeaders List<String>
- An array of strings that will be used for inspecting headers that have a key that matches one of the provided values.
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchHeaderOrder, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchHeaderOrderArgs                        
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- OversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling string
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversize_handling str
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
- oversizeHandling String
- Oversize handling tells AWS WAF what to do with a web request when the request component that the rule inspects is over the limits. Valid values include the following: CONTINUE,MATCH,NO_MATCH. See the AWS documentation for more information.
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchJa3Fingerprint, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchJa3FingerprintArgs                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA3 fingerprint. Valid values include: MATCHorNO_MATCH.
RuleGroupRuleStatementSizeConstraintStatementFieldToMatchJa4Fingerprint, RuleGroupRuleStatementSizeConstraintStatementFieldToMatchJa4FingerprintArgs                      
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- FallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior string
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallback_behavior str
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
- fallbackBehavior String
- The match status to assign to the web request if the request doesn't have a JA4 fingerprint. Valid values include: MATCHorNO_MATCH.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the awsTerraform Provider.